[issue15061] hmac.secure_compare() leaks information about length of strings

[Christian Heimes]

Christian Heimes <lists at cheimes.de> added the comment:

Alright, Antoine.

Shall explore option 2b) "optionally create a C implementation as it's much easier to check C code for timing issues" as I suggested in http://bugs.python.org/issue15061#msg162893 ?

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15061>
_______________________________________